[Orgs] 2 Organization management UI + role-aware permission gating (stacked on #267) - #268

Open

amal66 wants to merge 35 commits into

open-legal-products:mainfrom

amal66:olp-pr/organizations-ui

Commits on Aug 21, 2026

feat: multi-tenant organizations with owner/admin/member roles

amal66
and
claude
committed
1f5a604
feat: project role ladder + capability matrix over the org access branches

amal66
and
claude
committed
af941c7
fix(chat): require content.edit to write to an existing chat

amal66
and
claude
committed
1d3854d
fix(orgs): forbid admins from demoting or removing an org owner

amal66
and
claude
committed
183e667
fix(orgs): resolve member emails via the indexed profile lookup

amal66
and
claude
committed
0a0ee9c
fix(sql): apply org visibility to the paginated reviews overview the API actually calls

amal66
and
claude
committed
3515757
fix(sql): mirror org visibility into the bulk select-all ids RPC

amal66
and
claude
committed
c839b0e
test(tabular): send row_ids to clear-cells after the logical-rows refactor

amal66
and
claude
committed
58f6da7
fix(sql): port org visibility onto the second-generation list read-models

amal66
and
claude
committed
a5a9b12
fix(access): stop the org viewer branch from shadowing a project share on docs and reviews

amal66
and
claude
committed
2a94a2b
fix(projects): directory search 500s for every caller — jsonb containment used PgArray syntax

amal66
and
claude
committed
9752f07
fix(sql): give the filter-options RPCs the same org visibility as the lists they filter

amal66
and
claude
committed
59f0510
fix(access): merge overlapping access branches strongest-wins so a grant can never demote

amal66
and
claude
committed
937c19b
fix(audit): shared-project events silently vanished — the last jsonb containment misuses

amal66
and
claude
committed
0749d5a
fix(orgs): personal orgs are structurally single-user

amal66
and
claude
committed
af9c1a2
fix(orgs): a database trigger closes the last-owner race for good

amal66
and
claude
committed
cc39fb9
fix(orgs): membership departures vacate team seats; constraint races map to 409

amal66
and
claude
committed
ad2d7eb
fix(access): lazily re-provision a missing personal org

amal66
and
claude
committed
ec2bf8f
fix(orgs): stop the member-add routes from leaking which emails have accounts

amal66
and
claude
committed
94d07b3
fix(sql): normalize legacy review-share emails so lists agree with detail access

amal66
and
claude
committed
30c666e
fix(sql): align function-body comments so the drift fingerprint converges

amal66
and
claude
committed
4aced37
feat(frontend): organization management UI + role-aware permission gating

amal66
and
claude
committed
2fc5f60
fix(backend): fail GET /orgs/:orgId/teams when the roster query errors

amal66
and
claude
committed
e6052ee
perf(backend): resolve org roster profiles with a targeted query, not a table scan

amal66
and
claude
committed
579672c
fix(frontend): gate viewer uploads on content.edit and surface upload failures

amal66
and
claude
committed
8ab8df9
test(frontend): cover the org endpoint wrappers to satisfy the mikeApi coverage ratchet

amal66
and
claude
committed
a978a68
fix(frontend): gate review document-set mutations at the tier the server enforces

amal66
and
claude
committed
f718b4c
fix(frontend): fail closed when an API row carries no role fields

amal66
and
claude
committed
0fab1e2
fix(frontend): align review and workspace gates with the tiers the server enforces

amal66
and
claude
committed
80ba864
fix(frontend): settle drop uploads individually so one failure cannot hide the rest

amal66
and
claude
committed
4d83464
fix(frontend): close the remaining viewer dead ends — versions, review chat, add-documents

amal66
and
claude
committed
92b70cd
fix(frontend): org roster controls match what the actor's role can actually do

amal66
and
claude
committed
12c6c22
fix(frontend): type org mutation responses as the bare rows they are

amal66
and
claude
committed
efa98bb
fix(frontend): adapt the org settings page to the unified SettingsSection

amal66
and
claude
committed
13c7ae0
fix(frontend): read-only composer for project-chat viewers

amal66
and
claude
committed
4e72da3

Navigation Menu

Uh oh!

[Orgs] 2 Organization management UI + role-aware permission gating (stacked on #267) - #268

[Orgs] 2 Organization management UI + role-aware permission gating (stacked on #267)#268
amal66 wants to merge 35 commits into
open-legal-products:mainfrom
amal66:olp-pr/organizations-ui

Commits on Aug 21, 2026

feat: multi-tenant organizations with owner/admin/member roles

feat: project role ladder + capability matrix over the org access branches

fix(chat): require content.edit to write to an existing chat

fix(orgs): forbid admins from demoting or removing an org owner

fix(orgs): resolve member emails via the indexed profile lookup

fix(sql): apply org visibility to the paginated reviews overview the API actually calls

fix(sql): mirror org visibility into the bulk select-all ids RPC

test(tabular): send row_ids to clear-cells after the logical-rows refactor

fix(sql): port org visibility onto the second-generation list read-models

fix(access): stop the org viewer branch from shadowing a project share on docs and reviews

fix(projects): directory search 500s for every caller — jsonb containment used PgArray syntax

fix(sql): give the filter-options RPCs the same org visibility as the lists they filter

fix(access): merge overlapping access branches strongest-wins so a grant can never demote

fix(audit): shared-project events silently vanished — the last jsonb containment misuses

fix(orgs): personal orgs are structurally single-user

fix(orgs): a database trigger closes the last-owner race for good

fix(orgs): membership departures vacate team seats; constraint races map to 409

fix(access): lazily re-provision a missing personal org

fix(orgs): stop the member-add routes from leaking which emails have accounts

fix(sql): normalize legacy review-share emails so lists agree with detail access

fix(sql): align function-body comments so the drift fingerprint converges

feat(frontend): organization management UI + role-aware permission gating

fix(backend): fail GET /orgs/:orgId/teams when the roster query errors

perf(backend): resolve org roster profiles with a targeted query, not a table scan

fix(frontend): gate viewer uploads on content.edit and surface upload failures

test(frontend): cover the org endpoint wrappers to satisfy the mikeApi coverage ratchet

fix(frontend): gate review document-set mutations at the tier the server enforces

fix(frontend): fail closed when an API row carries no role fields

fix(frontend): align review and workspace gates with the tiers the server enforces

fix(frontend): settle drop uploads individually so one failure cannot hide the rest

fix(frontend): close the remaining viewer dead ends — versions, review chat, add-documents

fix(frontend): org roster controls match what the actor's role can actually do

fix(frontend): type org mutation responses as the bare rows they are

fix(frontend): adapt the org settings page to the unified SettingsSection

fix(frontend): read-only composer for project-chat viewers